---
typeId: req
recordId: benac-auth-005
fields:
  title: Station-to-Station authentication
  statement: Benac shall support cryptographic authentication of Station
    principals for Station-to-Station communication where identity, receipts,
    claims, storage, compute, replication, or data disclosure depend on the
    remote Station.
  rationale: HTTPS or network reachability alone is not Benac identity. Remote
    operations must be attributable to Station principals.
  verification: Complete an authenticated challenge/response or signed-message
    exchange with a Peer Station and verify that records bind the operation to
    the authenticated Station principal.
  testable: true
  status: draft
  area: BENAC-AUTH
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.2 Authentication and authority boundaries
  order: 20
---
